| /system/core/trusty/apploader/fuzz/ |
| D | app_fuzzer.cpp | 31 using android::trusty::fuzz::ExtraCounters;
32 using android::trusty::fuzz::TrustyApp;
99 android::trusty::fuzz::TrustyApp ta(TIPC_DEV, APPLOADER_PORT); in LLVMFuzzerTestOneInput()
103 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
111 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
117 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
125 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
|
| /system/nfc/src/fuzzers/ |
| D | fuzz.sh | 17 FUZZ_DIR=data/fuzz/$(get_build_var TARGET_ARCH)/$FUZZER_NAME
63 run_once >./logs/fuzz.log 2>&1
66 CRASH=$(grep -aoP "Test unit written to \K\S+" ./logs/fuzz.log)
70 mv ./logs/fuzz.log ./logs/ERROR/run_$TS.log
80 cat ./logs/verify.log>>./logs/fuzz.log
82 cp ./logs/verify.log ./logs/fuzz.log
94 mv ./logs/fuzz.log ./logs/$SIG_DIR/run_$TS.log
147 function fuzz() { function
173 fuzz $@
|
| D | README.md | 49 4. `fuzz.sh` helper script:
52 it easier, a `fuzz.sh` helper script is included. It needs to be run with
54 it and then use the "fuzz" function defined in it.
64 ../fuzz.sh build
74 ../fuzz.sh run --once
89 By default "fuzz run" will continue with whatever left last time. However,
92 7. Other tools provided by `fuzz.sh`:
94 Here are some extra options provided by `fuzz.sh` script:
95 * "fuzz gcov" pulls the coverage data from device, and generate a
97 * "fuzz gdb" setup gdb instance with the fuzz input so you can debug a
|
| /system/core/trusty/confirmationui/fuzz/ |
| D | msg_fuzzer.cpp | 30 using android::trusty::fuzz::ExtraCounters;
31 using android::trusty::fuzz::TrustyApp;
154 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
162 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
169 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
|
| /system/core/trusty/fuzz/ |
| D | tipc_fuzzer.cpp | 27 using android::trusty::fuzz::ExtraCounters;
28 using android::trusty::fuzz::TrustyApp;
92 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
|
| D | counters.cpp | 41 namespace fuzz { namespace
|
| D | utils.cpp | 75 namespace fuzz { namespace
|
| /system/keymint/common/fuzz/ |
| D | Cargo.toml | 2 name = "kmr-common-fuzz"
9 cargo-fuzz = true
|
| /system/security/keystore/tests/fuzzer/ |
| D | README.md | 45 $ adb shell /data/fuzz/${TARGET_ARCH}/keystoreGetWifiHidl_fuzzer/keystoreGetWifiHidl_fuzzer
95 $ adb shell /data/fuzz/${TARGET_ARCH}/keystoreSignature_fuzzer/keystoreSignature_fuzzer
96 $ adb shell /data/fuzz/${TARGET_ARCH}/keystorePackageInfo_fuzzer/keystorePackageInfo_fuzzer
97 $ adb shell /data/fuzz/${TARGET_ARCH}/keystoreApplicationId_fuzzer/keystoreApplicationId_fuzzer
98 $ adb shell /data/fuzz/${TARGET_ARCH}/keystoreAttestationId_fuzzer/keystoreAttestationId_fuzzer
103 * https://github.com/google/oss-fuzz
|
| /system/keymint/wire/fuzz/ |
| D | Cargo.toml | 2 name = "kmr-wire-fuzz"
9 cargo-fuzz = true
|
| /system/keymint/ta/fuzz/ |
| D | Cargo.toml | 2 name = "kmr-ta-fuzz"
9 cargo-fuzz = true
|
| /system/core/libutils/binder/ |
| D | Vector_fuzz.cpp | 197 void fuzz(FuzzedDataProvider&& provider) { in fuzz() function
209 [&]() { VectorFuzzerData<uint8_t>().fuzz(std::move(provider)); }, in LLVMFuzzerTestOneInput()
210 [&]() { VectorFuzzerData<int32_t>().fuzz(std::move(provider)); }, in LLVMFuzzerTestOneInput()
211 [&]() { VectorFuzzerData<NonTrivialDestructor>().fuzz(std::move(provider)); }, in LLVMFuzzerTestOneInput()
|
| /system/core/trusty/fuzz/include/trusty/fuzz/ |
| D | counters.h | 26 namespace fuzz {
|
| D | utils.h | 28 namespace fuzz {
|
| /system/core/init/fuzzer/ |
| D | README.md | 27 $ adb shell /data/fuzz/arm64/init_parser_fuzzer/init_parser_fuzzer
47 $ adb shell /data/fuzz/arm64/init_property_fuzzer/init_property_fuzzer
97 $ adb shell /data/fuzz/arm64/init_ueventHandler_fuzzer/init_ueventHandler_fuzzer
|
| /system/core/fastboot/fuzzer/ |
| D | README.md | 46 $ $ANDROID_HOST_OUT/fuzz/${TARGET_ARCH}/fastboot_fuzzer/fastboot_fuzzer CORPUS_DIR
51 * https://github.com/google/oss-fuzz
|
| /system/keymaster/fuzzer/ |
| D | README.md | 49 …$ adb shell /data/fuzz/${TARGET_ARCH}/k4_AndroidKeymaster4Device_fuzzer/k4_AndroidKeymaster4Device…
54 * https://github.com/google/oss-fuzz
|
| /system/security/keystore2/src/fuzzers/ |
| D | README.md | 17 $ adb shell /data/fuzz/${TARGET_ARCH}/keystore2_unsafe_fuzzer/keystore2_unsafe_fuzzer
|
| /system/libhidl/fuzzer/ |
| D | README.md | 28 $ adb shell /data/fuzz/arm64/libHidlBase_parcel_fuzzer/libHidlBase_parcel_fuzzer
|
| /system/keymint/wire/ |
| D | Android.bp | 144 srcs: ["fuzz/fuzz_targets/message.rs"],
161 srcs: ["fuzz/fuzz_targets/legacy_message.rs"],
|
| /system/core/fs_mgr/liblp/fuzzer/ |
| D | README.md | 59 $ adb shell /data/fuzz/arm64/liblp_builder_fuzzer/liblp_builder_fuzzer
89 $ adb shell /data/fuzz/arm64/liblp_super_layout_builder_fuzzer/liblp_super_layout_builder_fuzzer
129 $ adb shell /data/fuzz/arm64/liblp_apis_fuzzer/liblp_apis_fuzzer
|
| /system/keymint/ta/ |
| D | Android.bp | 99 srcs: ["fuzz/fuzz_targets/keydescription.rs"],
|
| /system/keymint/common/ |
| D | Android.bp | 111 srcs: ["fuzz/fuzz_targets/keyblob.rs"],
|
| /system/unwinding/libunwindstack/ |
| D | Android.bp | 497 "tests/fuzz/UnwinderComponentCreator.cpp",
498 "tests/fuzz/UnwinderFuzz.cpp",
|
| /system/core/toolbox/ |
| D | getevent.c | 196 abs.value, abs.minimum, abs.maximum, abs.fuzz, abs.flat, in print_possible_events()
|